CVE-2024-49197: Medium severity samsung exynos 980 firmware vulnerability
Published May 27, 2025
·Updated
An issue was discovered in Wi-Fi in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, W920, W930, and W1000. Lack of a boundary check in STOPKEEPALIVEOFFLOAD leads to out-of-bounds access.
Affected Software
30 affected components
Samsung Exynos 980=980
Samsung Exynos 850=850
Samsung Exynos 1080=1080
Samsung Exynos 1280=1280
Samsung Exynos 1330=1330
Samsung Exynos 1380=1380
Samsung Exynos 1480=1480
Samsung W920=W920
Samsung W930=W930
Samsung W1000=W1000
All of the following
Samsung Exynos 980 Firmware
Samsung Exynos 980
All of the following
Samsung Exynos 850 Firmware
Samsung Exynos 850
All of the following
Samsung Exynos 1080 Firmware
Samsung Exynos 1080
All of the following
Samsung Exynos 1280 Firmware
Samsung Exynos 1280
All of the following
Samsung Exynos 1330 Firmware
Samsung Exynos 1330
All of the following
Samsung Exynos 1380 Firmware
Samsung Exynos 1380
All of the following
Samsung Exynos 1480 Firmware
Samsung Exynos 1480
All of the following
Samsung Exynos W920 Firmware
Samsung Exynos W920
All of the following
Samsung Exynos W930 Firmware
Samsung Exynos W930
All of the following
Samsung Exynos W1000 Firmware
Samsung Exynos W1000
Event History
May 27, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-49197?
CVE-2024-49197 has a high severity score due to the potential for out-of-bounds access.
2
How do I fix CVE-2024-49197?
To fix CVE-2024-49197, update your Samsung Exynos firmware to the latest version provided by Samsung.
3
Which devices are affected by CVE-2024-49197?
CVE-2024-49197 affects Samsung Mobile and Wearable Processors including Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, W920, W930, and W1000.
4
What type of vulnerability is CVE-2024-49197?
CVE-2024-49197 is a boundary check vulnerability leading to out-of-bounds access.
5
Is CVE-2024-49197 being actively exploited?
As of the last update, there are no public reports confirming active exploitation of CVE-2024-49197.